Orbital Documentation

Cisco Orbital is a service that adds osquery to Secure Endpoint to support detailed and fast queries for incident responders. Orbital is available to Secure Endpoint Advantage customers and currently supported on:

Windows 10 (1803 or later) / 11
Windows Server 2012 / 2012 R2 / 2016 / 2019 / 2022
Windows 10 IoT Enterprise
macOS 10.15 / 11 / 12
RedHat Enterprise Linux (and compatible distributions) 6.10 / 7 (7.2 or later) / 8
Ubuntu 18.04 / 20.04 / 22.04
Oracle Linux (UEK) 7 / 8
Debian 10 / 11
Amazon Linux 2

Important Points of Note:

Orbital supports the use of proxies, except SSL terminating proxies. All operating systems can be used with proxies.
The screen captures in these Help topics may not always reflect the latest product names or UI enhancements.
Apple’s M1 hardware is supported when running macOS 12.

Table of Contents